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PROCEDURE FOR THE CONTROL OF A SUBSCRIBER IDENTITY 
MODULE IN A DATA COMMUNICATION SYSTEM , AND A DATA 
COMMUNICATION SYSTEM 

The present invention relates to a procedure 
as defined in the preamble of claim 1 for the control 
of a subscriber identity module in a data communicati- 
on system, preferably a mobile telephone network. Mo- 
reover, the invention relates to a data communication 
system as defined in the preamble of claim 8. 

In a mobile communication system, subscriber 
data are stored in a unit or device specially designed 
for data management. For instance, in the GSM system 
such a device is the home location register (HLR) . 
Stored in this register are certain parameters related 
to the subscriber or subscription, such as the mobile 
subscriber international ISDN number (MSISDN) and in- 
ternational mobile subscriber identification (IMSI) 
code . 

In practice, the capacity of a single physi- 
cal home location register is limited. The home loca- 
tion register devices used in the GSM system can typi- 
cally handle about 200000 - 300000 customers. Therefo- 
re, big operators need several home location register 
devices . 

The data contained in the subscriber identity 
module used in a mobile communication system includes 
the same data that are stored in the home location re- 
gister. In addition to these data, the subscriber 
identity module contains a secret key K £ used for en- 
cryption of radio communication and authentication of 
the mobile station. The data are generally added at 
the last stage of production of the subscriber identi- 
ty module in conjunction with its personalisation. Af- 
ter this, changing the data is either very difficult 
or impossible. 
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The customer may lose his/her subscriber 
identity module or the module may be damaged. Therefo- 
re, the operator must store subscriber identity modu- 
les suited for all home location registers at each 
5 customer service point if the operator wants to provi- 
de a flexible and full service regarding the renewal 
and control of subscriber identity modules. If the 
operator has e.g. 20 home location registers in its 
mobile communication system, then the customer service 

10 points must have an assortment of 2 0 subscriber iden- 
tity modules containing different data. This gives ri- 
se to a distinct logistic problem as well as a problem 
of efficiency regarding the capital invested in 
subscriber identity modules. 

15 The object of the present invention is to 

eliminate the drawbacks described above. A specific 
object of the present invention is to present a new 
type of procedure for the control of subscriber iden- 
tity modules in a data communication system. 

20 A further object of the invention is to pre- 

sent a device that can be used to change the data in a 
subscriber identity module to implement a flexible 
control of the module . 

A further object of the invention is to give 

2 5 the operator a chance to improve customer service. A 
specific object is to improve the service relating to 
the change of subscriber identity modules and replace- 
ment of damaged modules. 

As for the features characteristic of the in- 

30 vention, reference is made to the claims. 

In the procedure of the invention for the 
control of a subscriber identity module, which con- 
tains a subscriber identity code and a secret key, in 
a data communication system, such as a mobile communi- 

35 cation network, comprising a subscriber register for 
the maintenance of a subscriber identity module regis- 
ter, a message transmission system for the transmissi- 
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on of a message in the mobile communication network, 
and a mobile station to which the subscriber identity 
module is connected, a record is created in the 
subscriber register when the first subscription for a 
subscriber is opened, said record comprising a call 
number specific to the subscription, an encryption co- 
de and a subscriber identity code associated with the 
subscription. In addition, services specified for the 
subscriber in the mobile communication network can be 
stored in a home location register. The home location 
register is preferably a register in a GSM mobile com- 
munication network and contains subscriber specific 
information relating to right of use and functions . 
When the subscriber enters the area of a mobile commu- 
nication switching centre, the mobile station reports 
to its visitor location register (VLR) . The mobile 
communication switching centre then fetches the 
subscriber data from the subscriber's home location 
register and sends them to the visitor location regis- 
ter of its own area . and simultaneously updates the lo- 
cation data for the subscriber. 

As stated above, large mobile communication 
networks comprise several home location registers. 
Furthermore, the range of subscriber identity codes 
(IMSI) of a single home location register can be divi- 
ded into several sections, which means that, in res- 
pect of control of subscriber identity modules, a 
single physical subscriber register device may compri- 
se several subscriber registers (different IMSI ran- 
ges) . 

According to the invention, a second 
subscription associated with the subscriber identity 
module is opened. At the same time, a record compri- 
sing the call number, subscriber identity code and key 
corresponding to the second subscription is created in 
a subscriber register, which generally is different 
from the home location register containing the record 
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for the first subscription. A message comprising an 
instruction for changing the data corresponding to the 
first subscription in the subscriber identity module 
is sent to the first subscription and further to the 
subscriber identity module, and, based on the message, 
the data corresponding to the first subscription sto- 
red in the subscriber identity module are changed into 
data corresponding to the second subscription. Thus, 
the subscriber identity module and the mobile station 
to which the subscriber identity module is connected 
will function in accordance with the services and 
functions defined for the second subscription. 

As compared with prior art, the invention has 
the advantage that it makes it possible to signifi- 
cantly simplify the control of subscriber identity mo- 
dules even in large mobile communication systems. 

A further advantage of the invention is that 
the operator of the mobile communication network can 
avoid the logistic problem caused by the use of mul- 
tiple different subscriber identity modules. Moreover, 
the procedure of the invention allows better and fas- 
ter customer service in respect of subscriber identity 
modules. 

In an embodiment of the invention, a message 
is received and the data are changed when the mobile 
station is switched on for the first time with the 
subscriber identity module connected to it. Upon 
receipt of the message, an acknowledgement of receipt 
of the message is sent. Based on the acknowledgement, 
the mobile communication system removes the first 
subscription from the data communication system and 
from the home location register. It is also possible 
to send the acknowledgement only after the subscriber 
identity module has processed the message, thus making 
sure that the data in the subscriber identity module 
have been changed. 
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In an embodiment of the present invention, 
the system waits for an acknowledgement of receipt of 
the message for a predetermined period of time, e.g. 
24 h, and if no acknowledgement is received within 
this period, the message is sent again. The new 
message can also be sent to both subscriptions, becau- 
se it is possible in certain conditions that the data 
in the subscriber identity module have already been 
changed but no acknowledgement has been sent before 
the mobile station loses connection with the network. 
This guarantees that the mobile station and the 
subscriber identity module will receive the message 
sent and, based on the message, carry out the changes 
in the subscriber identity module and that the 
subscriber data in the mobile communication system re- 
main up to date . 

In an embodiment, acknowledgement of receipt 
of the message can be regarded as consisting of the 
occurrence of a mobile station corresponding to the 
second subscription being attached to the system (IMSI 
attach) . In conjunction with the changing of the data 
in the subscriber identity module, the subscriber 
identity code corresponding to the first subscription 
is deleted from the subscriber identity module . In ad- 
dition, the temporary mobile subscriber identity 
(TMSI) code can be deleted. 

According to the invention, the data communi- 
cation system of the invention, such as a mobile com- 
munication network, comprises a control device, which 
comprises means for opening a second subscription as- 
sociated with the subscriber identity module; means 
for creating a record in the subscriber register, said 
record comprising the call number, subscriber identity 
code and key corresponding to the second subscription. 
Further, according to the invention, the data communi- 
cation system comprises means for generating a message 
to be sent to the first subscription, said message 
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containing an instruction for changing the data cor- 
responding to the first subscription in the subscriber 
identity module, and means for changing the data cor- 
responding to the first subscription stored in the 
subscriber identity module into data corresponding to 
the second subscription. 

The control device is preferably disposed in 
conjunction with a billing and customer control system 
in the data communication system or mobile communica- 
tion network. Further, the message transmission system 
used in the system of the invention may be a short - 
message system as known in the GSM system. 

In the following, the invention will be 
described by the aid of examples of preferred embodi- 
ments by referring to the attached drawing, which is a 
diagram representing a data communication system ac- 
cording to the invention. 

The data communication system shown in the 
drawing, preferably a GSM system, comprises a mobile 
station MS, a subscriber identity module SIM connected 
to the mobile station, and, in the mobile station, me- 
ans 5 for changing the data corresponding to the first 
subscription and stored in the subscriber identity mo- 
dule into data corresponding to the second subscripti- 
on. In the mobile station, said means 5 are preferably 
implemented as part of a device controlling the 
subscriber identity module or as part of the subscri- 
ber identity module SIM itself. 

In addition, the data communication system 
presented in the drawing comprises a short -message 
switching centre SMSC and a base station controller 
BSC. The base station controller further comprises a 
home location register HLR1 , HLR2 . 

The system presented in the drawing further 
comprises a control device 1 disposed in conjunction 
with the billing and customer control system (not 
shown) . In addition, the drawing shows an agency appa- 
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ratus 6 provided at an agency that sells subscriptions 
and used to transmit the service and function data re- 
lating to a new subscription to the data communication 
system. In the drawing, the signalling occurring bet- 
5 ween the various devices is represented by arrows. The 
direction of the arrow indicates the signalling direc- 
tion. 

The control device further comprises means 2 
for opening a second subscription, means 3 for crea- 

10 ting a record in the subscriber register and means 4 
for generating a message to be sent to the first 
and/or second subscription. These means 2, 3, 4 can 
preferably be implemented in one and the same compu- 
ter, which is provided with suitable software for car- 

15 rying out the aforementioned functions and with a sui- 
table interface for connecting the computer to the mo- 
bile communication network 7. With this arrangement, 
the properties and functions of the means can be fle- 
xibly changed by changing the software used in the 

2 0 computer. 

Further, referring to the drawing, in a pre- 
ferred example embodiment of the invention, the seller 
of the subscription provides the international mobile 
station identity IMSI code of the subscriber identity 

2 5 module and the international telephone number of the 
subscription. This number pair is transmitted via the 
agency apparatus 6 to the control device 1. The cont- 
rol device 1 then opens in the billing and customer 
control system two subscriptions, whose parameters 

30 are: (IMSI1, MSISDNx, K L ) and (IMSI2, MSISDN, K L ) , whe- 
re IMSI corresponds to the subscriber identity code, 
MSISDN corresponds to the international telephone num- 
ber and Ki corresponds to the secret key used for en- 
cryption of radio communication and for authentication 

35 of the mobile station. Based on the function, records 
are also created in the first subscriber register HLR1 
and in the second subscriber register HL.R2 , respecti- 
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vely. In this example, the subscription corresponding 
to the first subscriber identity code IMSI1 contains 
only one service, the short -message service. For the 
subscription corresponding to the second subscriber 
identity code IMSI2, the services chosen by the 
subscriber are activated and corresponding information 
is sent to the control device 1 via the agency device 
6. 

After the two subscriptions have been opened, 
the control device of the invention sends a short 
message SMS corresponding to the MSISDNx telephone 
number to the first subscription via the short-message 
switching centre SMSC . After the short message has 
been sent by the short -message switching centre and 
received by the mobile station to which the subscriber 
identity module is connected, then the IMSI1 code in 
the subscriber identity module SIM of the mobile sta- 
tion is changed to the value IMSI2, and the ISMS1 and 
TIMSI codes in the subscriber identity module are de- 
leted. After this, when the mobile station is switched 
off and switched on again, the data in the subscriber 
identity module will be those corresponding to the se- 
cond subscription, i.e. the subscription for which the 
subscriber identity code is IMSI2 and for which the 
international telephone number is MS I SDN. 

Moreover, the mobile station sends an acknow- 
ledgement of receipt of the short message and when the 
acknowledgement is received by the control device 1 of 
the invention, the control device will delete the data 
corresponding to the first subscription from the bil- 
ling and customer control system. However, it is pos- 
sible that the mobile station is switched off before 
the acknowledgement is sent and the data changed, in 
which case the rest of the system will not know that 
the subscription has been changed. For this reason, in 
an embodiment of the invention, the control device is 
provided with a timeout for monitoring the receipt of 
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the acknowledgement. If no acknowledgement is received 
within a given period of time, e.g. 24 h, then the 
short message is sent to the mobile station number 
MSISDN corresponding to the second subscription. When 
an acknowledgement is received for either one of the 
messages, then, based on the acknowledgement, the data 
corresponding to the first subscription are deleted 
from the billing and control system. 

In addition, it is possible that the deletion 
of the data occurs as a consequence of an action car- 
ried out by another customer or by a terminal device 
held by another customer. A possible action of this 
nature might be e.g. the first attachment (IMSI at- 
tach) of another subscription received in a mobile 
communication network, of which a notice is transmit- 
ted to the service control device. 

In summary, let it be further stated that the 
solution of the invention combines the use of prior- 
art short messages and the use of a subscriber regis- 
ter and a billing and customer control system. Via 
this solution, an operations model is created accor- 
ding to which the operator only needs to order a sing- 
le type of subscriber identity modules but is still 
able to offer flexible card change services at all 
customer service points. It is further to be noted 
that the mobile communication network also provides 
other possibilities that can be utilised for the 
transmission of the message to the subscriber identity 
module . 

The invention is not restricted to the 
examples of its embodiments described above, but many 
variations are possible within the scope of the inven- 
tive idea defined by the claims. 
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CLAIMS 

1 . Procedure for the control of a subscriber 
identity module (SIM) , which contains a subscriber 
identity code (IMSI1) and a key (iq) , in a data commu- 
5 nication system, such as a mobile communication net- 
work, comprising a subscriber register (HLR1 , HLR2) 
for the maintenance of a subscriber identity module 
register, a message transmission system (SMSC) for the 
transmission of a message in the mobile communication 
10 network, and a mobile station (MS) to which the 
subscriber identity module is connected, in which pro- 
cedure a record is created in the subscriber register 
(HLR1 ) when a first subscription is opened, said re- 
cord comprising a subscription specific call number 
15 (MSISDNx) , an encryption code (iq) and a subscriber 
identity code (IMSI1) associated with the subscripti- 
on, characterised in that 

a second subscription associated with the subscri- 
ber identity module (SIM) is opened; 
20 a record comprising the call number (MSISDN) , 

subscriber identity code (IMSI2) and encryption key 
(Ki) corresponding to the second subscription is crea- 
ted in the subscriber register (HLR2) ; 

a message (SMS) containing an instruction for 
25 changing the data corresponding to the first subscrip- 
tion in the subscriber identity module (SIM) is sent 
to the first subscription; and 

based on the instruction, the data corresponding 
to the first subscription stored in the subscriber 
3 0 identity module are changed into data corresponding to 
the isecond subscription. 

2. Procedure as defined in claim 1, cha- 
racterised in that an acknowledgement of 
receipt of the message (SMS) and successful change is 
35 sent from the subscriber identity module (SIM) and, 



PCT/FI98/00476 

11 

based on the acknowledgement, the first subscription 
is removed from the data communication system. 

3. Procedure as defined in claim 1 or 2, 
characterised in that the message (SMS) is 
sent to the second subscription, an acknowledgement of 
receipt of the message is sent from the second 
subscription and, based on the acknowledgement, the 
first subscription is removed from the data communica- 
tion system. 

4. Procedure as defined in any one of the 
preceding claims 1 - 3 , characterised in 
that the system waits for an acknowledgement of 
receipt of the message for a predetermined period of 
time and, if no acknowledgement is received within 
this period, the message is sent again to the second 
subscription . 

5. Procedure as defined in any one of the 
preceding claims 1 - 4, characterised in 
that the first subscription is removed when attachment 
of the second subscription to the data communication 
system is detected in the system. 

6 . Procedure as defined in any one of the 
preceding claims 1 - 5, characterised in 
that a corresponding temporary subscriber identity co- 
de (TMSI) stored in the subscriber identity module is 
removed . 

7 . Procedure as defined in any one of the 
preceding claims 1 - 6, characterised in 
that the data communication system is a GSM mobile 
communication system. 

8. Data communication system, such as a mobi- 
le communication network, for controlling a subscriber 
identity module (SIM) containing a subscriber identity 
code (IMSI1) and a key (Ki) , said data communication 
system comprising a subscriber register (HLR1, HLR2 ) 
for the maintenance of a subscriber identity module 
register, a message transmission system (SMSC) for the 
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transmission of a message in the mobile communication 
network, and a mobile station (MS) to which the 
subscriber identity module is connected, in which data 
communication system a record is created in the 
subscriber register (HLR1) when a first subscription 
is opened, said record comprising a subscription spe- 
cific call number (MSISDNx) , an encryption code (Ki) 
and a subscriber identity code (IMSI1) associated with 
the subscription, characterised in that the 
data communication system comprises a control device 
(1) , which comprises 

means (2) for opening a second subscription asso- 
ciated with the subscriber identity module (SIM) ; 

means (3) for creating a record in the subscriber 
register ( HLR2 ) , said record comprising the call num- 
ber (MSISDN) , subscriber identity code (IMSI2) and key 
(Ki) corresponding to the second subscription; 

means (4) for generating a message (SMS) to be 
sent to the firsc subscription, said message contai- 
ning an instruction for changing the data correspon- 
ding to the first subscription in the subscriber iden- 
tity module; and 

means (5) for changing the data corresponding to 
the first subscription stored in the subscriber iden- 
tity module into data corresponding to the second 
subscription . 

9. Data communication system as defined in 
claim 8, characterised in that the control 
device (1) is disposed in conjunction with a billing 
and customer control system in the data communication 
system. 

10. Data communication system as defined in 
claim 8 or 9, characterised in that the 
message transmission system (SMSC) is a short -message 
system. 
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(57) ABSTRACT 

Procedure and system for the control of a 
subscriber identity module (SIM) containing a subscri- 
ber identity code (IMSI1) and a key (K x ) in a data 
communication system, such as a mobile communication 
network, comprising a subscriber register (HLR1, HL.R2) 
for the maintenance of a subscriber identity module 
register, a message transmission system (SMSC) for the 
transmission of a message in the mobile communication 
network, and a mobile station (MS) to which the 
subscriber identity module is connected, in which pro- 
cedure a record is created in the subscriber register 
when a first subscription for the subscriber is 
opened, said record comprising a subscription specific 
call number (MSISDNx) , an encryption code (Ki) and a 
subscriber identity code (IMSI1) associated with the 
subscription. According to the invention, a second 
subscription associated with the subscriber identity 
module (SIM) is opened; a record comprising the call 
number (MSISDN) , subscriber identity code (IMSI2) and 
encryption key (K ± ) . corresponding to the second 
subscription is created in the subscriber register 
(HLR2) ; a message (SMS) containing an instruction for 
changing the data corresponding to the first subscrip- 
tion in the subscriber identity module (SIM) is sent 
to the first subscription; and, based on the message, 
the data corresponding to the first subscription sto- 
red in the subscriber identity module are changed into 
data corresponding to the second subscription. After 
making sure that the operation has been successfully 
carried out in the subscriber identity module (SIM) , 
the first subscription is removed from the data commu- 
nication system. 
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